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Node initiates VoIP connection to peer node 



IKE phase 1 negotiation carried 
out to establish IKE S A 



IKE phase 2 negotiation carried out between nodes to 
establish a pair of IPSec SAs including a shared secret 



IPSec S A encryption data passed to respective 
VoIP applications at peer nodes 



Streamed VoIP data encrypted at sender using encryption data 



Sender passes encrypted data to TCP/IP 
layers for segmentation and encapsulation 



Data sent to receiver for recovery of streamed data and decryption 
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